Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/62576d4c-ec74-386b-8150-84c789babf1c.roa
File:                     62576d4c-ec74-386b-8150-84c789babf1c.roa (raw, json)
Hash identifier:          0LMzPCnSgcyfbsl3bNw+WWcOLBzJp8k+g2MVGSzcc8U=
Subject key identifier:   65:24:91:59:D1:B1:48:B4:AC:53:35:21:BA:4B:84:CE:25:B0:FB:0D
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584D7A054C8E8ED707843E204D80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/62576d4c-ec74-386b-8150-84c789babf1c.roa
Signing time:             Sun 12 Apr 2026 01:00:24 +0000
ROA not before:           Sun 12 Apr 2026 01:00:24 +0000
ROA not after:            Sat 11 Jul 2026 01:00:24 +0000
asID:                     132892
IP address blocks:        198.41.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7a:05:4c:8e:8e:d7:07:84:3e:20:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr 12 01:00:24 2026 GMT
            Not After : Jul 11 01:00:24 2026 GMT
        Subject: CN=f34a1829-630d-4387-a1dd-584adf0220a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ff:da:b7:1d:77:bd:a7:38:bc:7b:25:15:06:
                    ed:2a:93:50:03:9a:c3:38:89:8e:35:b3:2c:29:3f:
                    15:b6:51:1c:34:10:c2:08:50:3a:11:7b:31:13:7e:
                    d4:22:df:22:b9:0e:b6:3c:19:93:0b:9c:63:91:d6:
                    19:90:bc:18:12:02:68:b9:5d:1b:29:0e:6d:94:42:
                    48:a1:ed:ba:e8:fa:dd:5d:e7:e1:92:77:ba:e5:a7:
                    38:bf:8d:1c:8b:ca:47:30:98:78:4a:2f:e9:c1:f5:
                    71:27:65:cf:15:bd:48:41:a7:1c:24:90:72:f1:9a:
                    dd:a4:07:fe:1a:e2:7f:f7:0d:e6:f6:e9:c9:63:cb:
                    fe:d8:95:d2:e2:cf:c5:32:ef:cc:c2:a4:e3:a6:3f:
                    37:db:e4:5f:0f:b7:4a:f4:54:f6:86:93:5b:f3:63:
                    1a:fa:83:ea:90:d1:8d:5f:6a:c0:c0:bc:eb:f1:24:
                    06:fd:70:d4:3c:05:0d:4a:3f:93:fe:4d:67:ec:d7:
                    f1:fb:18:16:f4:3d:44:c1:a1:e2:d5:c6:90:6f:dd:
                    1e:82:a0:1e:5d:23:61:e3:1b:ac:96:ce:ab:1c:13:
                    d4:02:46:b3:12:66:58:ad:54:27:de:f6:30:be:9f:
                    56:e1:b5:47:40:99:7a:66:74:04:7b:03:30:d4:62:
                    71:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:24:91:59:D1:B1:48:B4:AC:53:35:21:BA:4B:84:CE:25:B0:FB:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/62576d4c-ec74-386b-8150-84c789babf1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:7a:be:5a:36:5d:38:01:53:70:ba:90:f2:6e:91:c0:e4:49:
         3e:b6:a6:07:fb:7a:58:89:88:53:40:5c:f2:c0:33:43:91:dd:
         c0:ee:b4:3a:7b:27:fb:a0:86:84:b1:ce:ef:64:70:06:3f:3e:
         fa:65:73:be:b3:d2:9a:65:01:1a:de:36:2c:87:af:df:a6:1e:
         a4:14:78:81:cd:5a:ae:00:17:2c:46:5f:b6:b2:e6:70:74:fd:
         76:4e:f9:03:01:cd:3e:34:2a:fc:4e:41:64:51:e8:f7:7f:5e:
         c4:77:ab:aa:a3:58:b5:fe:d5:a2:7a:5e:c8:21:f2:f2:bf:dd:
         8f:07:99:92:76:2e:7c:56:6b:5a:30:60:06:28:24:02:1a:32:
         68:a8:64:53:55:c2:d4:b5:1f:36:bf:b2:4f:71:22:c8:2a:35:
         45:e7:79:0f:07:53:56:2d:a6:d9:09:bc:83:b1:7a:90:35:ea:
         9d:cc:4d:d1:b8:7c:3a:b2:1e:ce:c5:8c:25:1b:bc:bd:8a:df:
         41:30:ff:48:c6:2c:fa:38:7a:d6:0b:63:86:88:60:bf:ff:cc:
         a3:81:32:08:ec:0d:ec:5a:e1:65:88:d1:c8:9a:7f:c5:c8:54:
         76:1c:01:53:15:02:68:95:0e:df:6b:4b:c2:f7:a1:46:68:8c:
         5e:64:2a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:59:32 2026 by rpki-client